llm-cost-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions and guidelines for optimizing LLM API costs. No executable code, scripts, or configuration files are present.
- [PROMPT_INJECTION]: Instructions are focused on domain-specific advice (cost engineering). No evidence of adversarial prompts, role-play jailbreaks, or safety bypasses.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No network operations or access to sensitive local file paths. Mentions of providers (OpenAI, Anthropic, Google) are contextual to the cost optimization purpose.
- [INDIRECT_PROMPT_INJECTION]: Analysis of potential attack surface for indirect injection:
- Ingestion points: Processes user conversation logs and system prompts within the agent's context as specified in SKILL.md.
- Boundary markers: No explicit boundary markers or isolation instructions for untrusted data are defined.
- Capability inventory: No file writing, shell execution, or network operations found across the skill instructions.
- Sanitization: No sanitization or escaping of external content is specified, as the skill functions purely as an advisor.
Audit Metadata